Article View: comp.unix.shell
Article #151Re: Shell Scipt Security
From: Tom Christiansen
Date: Sat, 25 Jul 1992 13:34
Date: Sat, 25 Jul 1992 13:34
40 lines
2092 bytes
2092 bytes
From the keyboard of ian@horse.UUCP ( as in Bunny):
:Whether that be a "shell compiler" or some other mechanism I am open
:to advice. We need to protect our time and investment in this little project
:and stop it from being copied and stolen.
Rewrite it in inflexible C, then: lock it in stone and throw away the
key. Now your effort is safe. A shell compiler would buy you negligible
speed and little security, since it would still call the base programs,
which can be trivially traced.
Seriously, put a copyright notice on the top of the source.
That's what AT&T does.
:find / -type f -print | xargs -t ls -qb 2>/dev/null | grep '\\'
No option b
usage: ls [-acdfghilqrstu1ACHLFR] name
It also has the problem of not working if someone has done this to you:
mkdir "/tmp/etc^J"
cd $!
touch passed
Furthermore, you've assumed an xargs command, not supplied
on some systems I run on. I suggest instead this:
#!/usr/bin/perl
require 'find.pl';
&find('/');
sub wanted { /\001-\037\177-\377/ && print("-->$name<--\n"); }
--tom
--
Tom Christiansen tchrist@convex.com convex!tchrist
I do not feel obliged to believe that the same God who has endowed us
with sense, reason, and intellect has intended us to forgo their use.
-- Galileo Galilei
Technical Details
Message-ID:
<1992Jul25.133433.13637@news.eng.convex.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!convex!convex!tchristReferences:
<24@horse.UUCP>Show Full Headers
Complete Article Headers
Newsgroups: comp.unix.shell
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!convex!convex!tchrist
From: Tom Christiansen <tchrist@convex.COM>
Subject: Re: Shell Scipt Security
Message-ID: <1992Jul25.133433.13637@news.eng.convex.com>
Originator: tchrist@pixel.convex.com
Sender: usenet@news.eng.convex.com (news access account)
Nntp-Posting-Host: pixel.convex.com
Reply-To: tchrist@convex.COM (Tom Christiansen)
Organization: CONVEX Realtime Development, Colorado Springs, CO
References: <24@horse.UUCP>
Date: Sat, 25 Jul 1992 13:34:33 GMT
X-Disclaimer: This message was written by a user at CONVEX Computer
Corp. The opinions expressed are those of the user and
not necessarily those of CONVEX.
Lines: 40